A list of Splunk queries that I've collected and used over time.
☆98Nov 3, 2020Updated 5 years ago
Alternatives and similar repositories for splunkqueries
Users that are interested in splunkqueries are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repository contains Splunk queries to hunt some anomalies☆48Jul 28, 2022Updated 4 years ago
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆69Jul 2, 2026Updated 4 months ago
- A collection of Splunk dashboard templates.☆16Apr 18, 2019Updated 7 years ago
- ☆14Jan 2, 2025Updated last year
- Collection of Splunking Tools, SPL Code and Resources☆17Oct 2, 2026Updated last month
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Splunk code (SPL) for serious threat hunters and detection engineers.☆294Jan 15, 2024Updated 2 years ago
- This repository is a comprehensive collection of resources, documentation, apps, and add-ons related to Splunk, a powerful data analytics…☆26Oct 10, 2026Updated 3 weeks ago
- Defence Against the Dark Arts☆35Sep 15, 2019Updated 7 years ago
- SPL cheatsheet for Splunk.☆27Dec 2, 2022Updated 3 years ago
- Collection of Dashboards for Threat Hunting and more!☆76Oct 17, 2020Updated 6 years ago
- A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon☆220May 23, 2020Updated 6 years ago
- Various Splunk Scripts and applets, all in one place☆33Oct 22, 2026Updated last week
- DNS Dashboard for hunting and identifying beaconing☆17Jul 29, 2020Updated 6 years ago
- Track C2 servers, tools, and botnets over time by framework and location☆16Aug 17, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Splunk Queries for SOC Analyst☆17Jan 25, 2024Updated 2 years ago
- ☆29May 1, 2025Updated last year
- Splunk Stuffs!☆14Oct 14, 2023Updated 3 years ago
- ☆21Mar 26, 2026Updated 7 months ago
- LLM-assisted adversary procedure extraction pipeline for threat-informed defense cycle.☆22Sep 20, 2026Updated last month
- Queries, Dashboards, and Splunk Knowledge Objects to Monitor Oracle Database Metrics☆14Mar 11, 2021Updated 5 years ago
- A place to store sample data files for Splunk☆17Aug 3, 2018Updated 8 years ago
- A repository dedicated to tracking ransomware families based on leaked builders.☆22Apr 17, 2024Updated 2 years ago
- Crowdstrike response script containing various functions for IR/triage☆13Dec 7, 2020Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Power-Forensics is the Best Friend for Incident Responders to perform IR and collect evidences for Linux based host☆12Jun 2, 2023Updated 3 years ago
- KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunt…☆1,765Oct 13, 2026Updated 3 weeks ago
- A secure repository of tools, guides, and cheat sheets for Cyber Crime Investigators, DFIR professionals, OSINT analysts, and Threat Hunt…☆11Aug 15, 2025Updated last year
- Full of public notes and Utilities☆135Jan 6, 2026Updated 9 months ago
- Provides an advanced input.conf file for Windows and 3rd party related software with more than 70 different event log mapped to the MITRE…☆101Apr 7, 2026Updated 6 months ago
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆21Jul 1, 2023Updated 3 years ago
- Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic lo…☆24Jan 23, 2023Updated 3 years ago
- Splunk Observability Cloud docs☆25Aug 4, 2025Updated last year
- Splunk Security Content☆1,724Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Python scripts to download, parse, and enrich scans.io study data and load into Splunk for research, threat intelligence gathering, and s…☆20Oct 23, 2026Updated last week
- Shell script to download apps from Splunkbase☆24May 19, 2020Updated 6 years ago
- A proof-of-concept re-assembler for reverse VNC traffic.☆24May 21, 2023Updated 3 years ago
- Repo for some CrowdStrike Falcon Real-Time-Response PowerShell scripts☆16Oct 24, 2022Updated 4 years ago
- A series of PowerShell scripts to automate the assessment of Azure IaaS security☆23Feb 18, 2026Updated 8 months ago
- OpenTSDB interface for Erlang☆10Nov 18, 2011Updated 14 years ago
- Prometheus SELinux policy module for CentOS 7 & RHEL 7☆11Mar 8, 2019Updated 7 years ago